$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: iWVY6ZGyL9NYXj1a5tevSBbYURAzpjjrL1U9ZBVR0tI= Subject key identifier: 98:4F:B3:09:63:8C:71:97:5B:81:45:F5:FD:6E:3B:6D:A8:B0:66:53 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 09E7 Signing time: Sat 18 May 2024 20:49:08 +0000 Manifest this update: Sat 18 May 2024 20:49:08 +0000 Manifest next update: Sat 25 May 2024 20:49:08 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: SVnYMj5n0flR0A7HuCWvXGbtuA3/p2IVPVDR2J6DejA=) 2: 5B56C330B50511EE92C72A20C4F9AE02.roa (hash: BjSngiLHYsmqKnPCnXmhA6Tj5RhfmNyjh2/3c5JOyeg=) 3: 3061606C730211EE89A20645C4F9AE02.roa (hash: zwEDRIf0yhbelWIPh/2jk7yci7g1k4DO00ZpVeeLfkM=) 4: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: n/6JXGW2LGiVtVdZfeb8YYT96ymmzFPMsDEDo1BegtM=) 5: 5BDD3D7AB50511EE92C72A20C4F9AE02.roa (hash: NAFs9i+pAMJGOI/WdQ3A+GWtfysUnERcKpSX4hDnT2U=) 6: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: yI62k3HDsAst7b3Qo0JtUN2sIMtTm1dDCXVLtBX2JP8=) 7: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 1baMKjJbh5wM2FKHYUidKcK5chshZiM45wf6m9WlCA0=) 8: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: x367SwKGKieQcQKaa2Z+LyGNJsEEcL+cCHEKK/0Cy04=) 9: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: foej3QKzD3G25vAXzDYSO+reZnBCU6HHzTJeiNa5zo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2597 (0xa25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: May 18 20:49:08 2024 GMT Not After : May 25 20:49:08 2024 GMT Subject: CN=66491444-6eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:d6:d3:95:be:26:56:65:6f:f8:ab:70:91: 9e:e4:e7:ba:be:98:cd:6b:e8:5d:2f:58:4c:09:2c: c6:fa:6e:b7:78:4c:a6:74:52:15:43:2a:0a:71:5e: a0:9c:ee:5f:e6:f5:5e:6e:69:28:e0:ef:01:6c:0d: 9c:1d:ce:b2:f2:25:61:03:f6:91:6b:01:68:58:79: e6:f5:54:e2:f2:1d:f8:1a:f4:86:bf:9b:89:43:b2: 82:91:ab:5a:43:8d:88:33:86:12:47:2d:ef:b9:4b: c1:6f:1f:d8:5f:6d:3e:8f:83:45:9d:dc:77:1c:91: 60:56:91:11:34:fa:d6:a7:18:bb:c8:9e:74:56:33: c2:5b:95:35:8a:df:8c:ca:eb:02:66:ab:3d:b7:39: 83:ee:92:08:16:e3:f2:ec:a2:2d:fb:ab:65:ac:b6: 25:c1:da:e2:c3:aa:b9:fb:09:c3:1e:37:63:7e:04: ca:8b:6f:f2:39:2f:79:92:2f:37:55:ac:3a:30:bc: 00:42:ba:55:7b:d5:b3:6f:96:55:95:64:2d:54:eb: 5d:36:f9:97:f1:37:7b:76:05:bb:48:aa:e4:4c:b9: 2f:c8:8a:8f:a2:02:7c:05:14:9d:0a:16:74:3e:43: 7c:0d:0a:34:6c:89:0c:a6:e0:17:14:0b:2e:3c:50: 44:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4F:B3:09:63:8C:71:97:5B:81:45:F5:FD:6E:3B:6D:A8:B0:66:53 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f6:3e:ba:37:68:95:fd:7a:d0:c7:a6:d3:ba:1e:7f:78:af: b7:a8:e6:b9:d9:fa:e3:aa:f6:aa:25:86:84:c9:de:05:d9:f9: a9:52:63:38:c5:7a:ca:f2:d8:23:85:e3:2a:63:b8:59:4b:e9: 50:e1:69:d5:51:10:e0:1a:92:5d:61:3d:af:a8:05:47:00:e9: 62:53:ba:d1:10:a1:2d:e0:28:8f:c7:e2:69:d5:2a:8b:0f:0f: f5:a9:a5:7d:f1:be:ef:9c:a1:7b:f9:26:96:9f:46:42:f5:6a: 0c:95:81:ac:0e:87:b1:22:ce:ee:21:38:70:52:b1:ce:08:cb: 2d:31:4b:3c:fb:f6:bd:31:3a:1d:18:4b:d0:ee:9c:9c:e3:86: 00:71:94:47:ee:b3:04:95:16:4d:ed:5a:d8:9f:3a:5b:eb:38: 33:b2:9f:dc:fc:49:0b:6b:a5:b0:31:94:ab:da:8b:9d:31:5d: 66:11:42:52:94:8a:17:0f:aa:4f:7a:48:07:7d:d2:e7:27:81: 29:e4:9d:14:78:38:6b:50:30:d5:eb:dd:8e:b0:a4:b7:30:9f: 5b:0b:61:d0:bc:0e:2e:b4:d5:cb:9a:c5:dc:f5:ae:5f:10:dc: 25:69:86:14:ef:7e:a0:40:94:44:af:2e:be:4d:ef:11:8f:bd: a4:ef:94:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjQwNTE4MjA0OTA4WhcNMjQwNTI1MjA0OTA4WjAYMRYwFAYD VQQDEw02NjQ5MTQ0NC02ZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPbW05W+JlZlb/ircJGe5Oe6vpjNa+hdL1hMCSzG+m63eEymdFIVQyoKcV6g nO5f5vVebmko4O8BbA2cHc6y8iVhA/aRawFoWHnm9VTi8h34GvSGv5uJQ7KCkata Q42IM4YSRy3vuUvBbx/YX20+j4NFndx3HJFgVpERNPrWpxi7yJ50VjPCW5U1it+M yusCZqs9tzmD7pIIFuPy7KIt+6tlrLYlwdriw6q5+wnDHjdjfgTKi2/yOS95ki83 Vaw6MLwAQrpVe9Wzb5ZVlWQtVOtdNvmX8Td7dgW7SKrkTLkvyIqPogJ8BRSdChZ0 PkN8DQo0bIkMpuAXFAsuPFBEIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhPswlj jHGXW4FF9f1uO22osGZTMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp9j66N2iV/XrQx6bTuh5/eK+3qOa52frjqvaqJYaEyd4F2fmpUmM4 xXrK8tgjheMqY7hZS+lQ4WnVURDgGpJdYT2vqAVHAOliU7rREKEt4CiPx+Jp1SqL Dw/1qaV98b7vnKF7+SaWn0ZC9WoMlYGsDoexIs7uIThwUrHOCMstMUs8+/a9MTod GEvQ7pyc44YAcZRH7rMElRZN7VrYnzpb6zgzsp/c/EkLa6WwMZSr2oudMV1mEUJS lIoXD6pPekgHfdLnJ4Ep5J0UeDhrUDDV692OsKS3MJ9bC2HQvA4utNXLmsXc9a5f ENwlaYYU736gQJREry6+Te8Rj72k75Qa -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org